Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
File:                     GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft (raw, json)
Hash identifier:          p3TmHFQeMswWohgLXHF57u04bUW9LHa0MAhL1As9jZU=
Subject key identifier:   23:CC:C0:55:26:5B:29:68:4E:2B:3E:7F:F2:17:11:F6:A7:72:ED:0B
Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
Certificate issuer:       /CN=1ab634dc74f6037ba47311d127420e76f296be54
Certificate serial:       0196C6161840A441F964BA3CBD2FD192C379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
Manifest number:          153E
Signing time:             Mon 12 May 2025 20:00:58 +0000
Manifest this update:     Mon 12 May 2025 20:00:58 +0000
Manifest next update:     Tue 13 May 2025 20:00:58 +0000
Files and hashes:         1: 7UAk0cN_93o1IqUzEsLzy3OF8t8.roa (hash: X/DccKCPSXNbl5PAX4IP4Kv17+DSYA35yARpxNApl1o=)
                          2: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl (hash: eyYt4uR7TSDjNBq2zkGGhWYXNaZxuVWTwTwv1kvpSvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:16:18:40:a4:41:f9:64:ba:3c:bd:2f:d1:92:c3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54
        Validity
            Not Before: May 12 20:00:58 2025 GMT
            Not After : May 13 20:00:58 2025 GMT
        Subject: CN=23ccc055265b29684e2b3e7ff21711f6a772ed0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0a:f8:4c:c1:41:eb:30:45:e8:58:f1:cd:d4:
                    b1:5b:04:5c:a5:34:d5:87:4d:c8:ea:db:8e:b7:e7:
                    b8:8a:c9:61:c8:4e:5d:58:59:7d:79:31:7b:0c:4a:
                    d9:41:6a:c5:7b:f7:e2:45:18:1a:be:bd:90:10:ba:
                    e4:bb:3b:a1:7c:f5:a3:a7:66:04:a2:08:dc:76:07:
                    dd:7c:05:6d:1b:ad:90:a4:03:1c:85:a3:25:33:2f:
                    37:2e:c6:47:23:18:dd:40:5c:53:5f:37:5f:03:17:
                    49:ac:4b:77:1e:fd:77:20:cd:ce:a4:5e:a0:eb:fe:
                    76:b8:76:0b:53:bb:32:8d:e1:09:ff:6a:ae:4e:99:
                    96:05:44:c3:5f:f1:62:5a:ad:ec:d5:47:86:9c:ee:
                    d9:f3:8b:e1:cb:61:dd:c8:a5:e3:09:6f:f8:a6:6c:
                    c1:c7:98:88:54:b1:81:dc:98:1f:ee:32:33:0c:27:
                    66:f1:b6:3a:b9:f1:a4:82:dc:6e:0d:8a:e8:45:87:
                    02:76:cf:d6:77:a4:8d:61:54:36:f2:1b:b6:0d:11:
                    e7:de:07:95:94:00:02:56:df:2f:e0:39:cc:d4:24:
                    ff:7e:d7:d5:cf:18:c2:3c:31:d3:2a:98:b2:ff:a9:
                    15:be:79:23:c9:1e:32:6f:65:9d:29:cc:b6:d2:ab:
                    ff:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CC:C0:55:26:5B:29:68:4E:2B:3E:7F:F2:17:11:F6:A7:72:ED:0B
            X509v3 Authority Key Identifier:
                keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a2:4b:e2:12:82:ab:36:6a:bf:06:6c:8c:5b:a5:e6:5a:97:
         c6:e1:ee:da:8f:8c:69:0a:e6:e7:b8:a8:62:e1:11:cb:23:e8:
         0b:a1:23:fc:52:56:0a:03:47:81:3b:91:a9:25:67:1d:de:d7:
         6c:bb:ce:ee:78:e8:95:69:5d:bd:8a:ae:d1:6a:46:8c:5b:9a:
         f2:53:80:9d:19:8c:71:46:46:37:5b:b4:c5:60:65:98:42:9a:
         c3:d6:eb:e6:b4:44:ac:de:b0:c5:bf:40:c9:be:5b:e0:68:bd:
         26:77:12:67:4d:e5:86:d5:84:f2:5b:dd:3d:ff:5f:26:1a:8a:
         e0:07:f6:1a:b4:03:03:89:d5:1a:6c:54:4d:27:c8:cf:58:47:
         16:26:39:27:c5:ed:aa:4d:fd:70:b4:db:d4:e6:22:55:42:87:
         5a:e0:cd:19:9a:5a:15:a3:cc:ea:aa:2a:a2:88:f5:b6:77:1b:
         61:7d:1b:ee:f2:cf:9f:0d:67:ec:c8:91:5f:53:44:92:32:63:
         e3:16:c9:e4:e7:71:cb:fd:3a:d8:21:c2:cf:0b:a5:d0:ae:9a:
         a2:83:42:fc:5c:86:63:2b:62:24:0b:cf:13:22:69:0e:b2:b3:
         e4:27:40:36:11:9d:4c:30:73:3c:9c:4a:4a:1e:2d:2e:92:50:
         92:a6:e5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:01:33 2025 by rpki-client